chown apache: /etc/squirrelmail/*
chown apache: -R /var/lib/squirrelmail/
chown apache: -R /usr/share/squirrelmail
chown apache: -R /var/spool/squirrelmail/attach/
cd /usr/share/squirrelmail/plugins/
wget http://squirrelmail.org/countdl.php?fileurl=http%3A%2F%2Fwww.squirrelmail.org%2Fplugins%2Fcompatibility-2.0.15-1.0.tar.gz
tar xvzf compatibility-2.0.15-1.0.tar.gz
cd /usr/share/squirrelmail/plugins/compatibility
patch -p0 < patches/compatibility_patch-1.4.8.diff
chown apache: -R /usr/share/squirrelmail
cd /usr/share/squirrelmail/plugins/
wget http://squirrelmail.org/countdl.php?fileurl=http%3A%2F%2Fwww.squirrelmail.org%2Fplugins%2Fmsg_flags-1.4.20-1.4.3.tar.gz
tar xvzf msg_flags-1.4.20-1.4.3.tar.gz
cd /usr/share/squirrelmail/plugins/msg_flags
patch -p0 < patches/msg_flags-squirrelmail-1.4.3a.diff
chown apache: -R /usr/share/squirrelmail
#safemode
php_admin_value safe_mode_include_dir /usr/share/pear/
php_admin_value safe_mode_exec_dir /usr/share/squirrelmail
php_admin_value open_basedir "/usr/share/pear/:/usr/share/squirrelmail/:/var/lib/squirrelmail/prefs/:/etc/squirrelmail/:/var/spool/squirrelmail/attach/"
--- class/deliver/Deliver.class.php.orig 2010-01-30 23:22:20.000000000 +0100
+++ class/deliver/Deliver.class.php 2010-01-30 23:22:39.000000000 +0100
@@ -430,7 +430,7 @@
if (isset($encode_header_key) &&
trim($encode_header_key)!='') {
// use encoded headers, if encryption key is set and not empty
- $header[] = 'X-Squirrel-UserHash: '.OneTimePadEncrypt($username,base64_encode($encode_header_key)).$rn;
+ #$header[] = 'X-Squirrel-UserHash: '.OneTimePadEncrypt($username,base64_encode($encode_header_key)).$rn;
$header[] = 'X-Squirrel-FromHash: '.OneTimePadEncrypt($this->ip2hex($REMOTE_ADDR),base64_encode($encode_header_key)).$rn;
if (isset($HTTP_X_FORWARDED_FOR))
$header[] = 'X-Squirrel-ProxyHash:'.OneTimePadEncrypt($this->ip2hex($HTTP_X_FORWARDED_FOR),base64_encode($encode_header_key)).$rn;